Commonwealth Consolidated Acts

PRIVACY ACT 1988 - SECT 94F

             (1)  A person commits an offence if:

                     (a)  the person retains data on a database outside Australia; and

                     (b)  the data is COVID app data that has been uploaded from a communication device to the National COVIDSafe Data Store.

Penalty:  Imprisonment for 5 years or 300 penalty units, or both.

             (2)  A person commits an offence if:

                     (a)  the person discloses data to another person who is outside Australia; and

                     (b)  the data is COVID app data that has been uploaded from a communication device to the National COVIDSafe Data Store; and

                     (c)  the person is not a person who:

                              (i)  is employed by, or in the service of, a State or Territory health authority; and

                             (ii)  discloses the data for the purpose of, and only to the extent required for the purpose of, undertaking contact tracing.

Penalty:  Imprisonment for 5 years or 300 penalty units, or both.